Aller au contenu
Se connecter
8.3 Élevée

CVE-2026-44937 Potential forgery of webhook requests when using a unauthenticated webhook in SUSE Rancher Fleet 0.15 before 0.15.2,…

Description

Potential forgery of webhook requests when using a unauthenticated webhook in SUSE Rancher Fleet 0.15 before 0.15.2, 0.14 before 0.14.6, 0.13 before 0.13.11 and 0.12 before 0.12.5 could be used by remote attackers to cause a denial of service or a downgrade attack on other repositories on the system.

Produits et versions touchés

Produit Versions touchées Corrigé en
Rancher 0.15 0.15.0 → < 0.15.2 0.15.2
Rancher 0.14 0.14.0 → < 0.14.6 0.14.6
Rancher 0.13 0.13.0 → < 0.13.11 0.13.11
Rancher 0.12 0.12.0 → < 0.12.15 0.12.15

Autres CVE de Rancher

Les 86 CVE de Rancher →
CVE-2026-88811 Missing filtering in the SUSE Rancher Manager meta proxy could cause passed in rancher credentials to be leaked to cloud… 9.1 Critique CVE-2026-88810 A privilege escalation issue was discovered in Rancher Manager's role-based access control 7.2 Élevée CVE-2026-88809 A security vulnerability exists in the SUSE Rancher Manager meta proxy endpoint (/meta/proxy) 7.6 Élevée CVE-2026-94290 SUSE Rancher Fleet clusters reference a kubeconfig secret that the controller uses to install and manage a Fleet agent… 9.1 Critique
Suivre cette CVE